Riskcovery

CVE-2026-43289

kexec: derive purgatory entry from symbol

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
May 23, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

kexec: derive purgatory entry from symbol

kexec_load_purgatory() derives image->start by locating e_entry inside an SHF_EXECINSTR section. If the purgatory object contains multiple executable sections with overlapping sh_addr, the entrypoint check can match more than once and trigger a WARN.

Derive the entry section from the purgatory_start symbol when present and compute image->start from its final placement. Keep the existing e_entry fallback for purgatories that do not expose the symbol.

WARNING: kernel/kexec_file.c:1009 at kexec_load_purgatory+0x395/0x3c0, CPU#10: kexec/1784 Call Trace: <TASK> bzImage64_load+0x133/0xa00 __do_sys_kexec_file_load+0x2b3/0x5c0 do_syscall_64+0x81/0x610 entry_SYSCALL_64_after_hwframe+0x76/0x7e

[me@linux.beauty: move helper to avoid forward declaration, per Baoquan]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f368aed4827bd4276c0e3664fb2cb815a8d7caf3 to before 027797595a108726f4a0a45d225f603b0ffbd22bAffected
  • d38e051ec6fd8650b139d9bc4b0b8b261953b263 to before 1737d37ae1d2814e6cf0a1af87af3d41f0812b95Affected
  • 013027918a4efa807409fcb356009c117e4d181a to before f736032c638a33a243e9126e617788f763d648f9Affected
  • 8652d44f466ad5772e7d1756e9457046189b0dfc to before cfccd3b8c51bc57a8a6fcb2fd30453afae5bc0d2Affected
  • 8652d44f466ad5772e7d1756e9457046189b0dfc to before 875355152b33436907c2a6d2ffad1431fa86c62bAffected
  • 8652d44f466ad5772e7d1756e9457046189b0dfc to before 36eb314184a0ae74dd42914b47d2b9fc43be8034Affected
  • 8652d44f466ad5772e7d1756e9457046189b0dfc to before 5226570bd252cea2e805a161cb0f75c204c3108aAffected
  • 8652d44f466ad5772e7d1756e9457046189b0dfc to before 480e1d5c64bb14441f79f2eb9421d5e26f91ea3dAffected
  • 4947a0eb7d642b6048559857964966016ef3aa8bAffected
  • b16bf76b382810257e3fb6278663a9d131b70197Affected
  • cb1638618545182a01444b2b20a4ed6b9d2a8c8fAffected
  • 5.10.185 to before 5.10.252Affected
  • 5.15.118 to before 5.15.202Affected
  • 6.1.35 to before 6.1.165Affected
  • 4.19.287 to before 4.20Affected
  • 5.4.248 to before 5.5Affected
  • 6.3.9 to before 6.4Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 5.10.252 through 5.10.*Not affected
  • 5.15.202 through 5.15.*Not affected
  • 6.1.165 through 6.1.*Not affected
  • 6.6.128 through 6.6.*Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.